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What is claimed is: 



Claims 



1 1 . A payment management system for obtaining approval of an electronic fund 

2 transfer disbursement file from a user of a remote system and transferring the 

3 electronic fund transfer disbursement file to a payments processor, the payment 

4 management system comprising: 

5 an electronic transfer submission module for: 

6 generating a digest by performing a hash on the electronic fund transfer 

7 disbursement file; 

8 receiving an authorization response from the remote system; and 

9 transferring an electronic funds submission to the payments processor, 

10 the electronic funds submission comprising the payment transaction file and at least a 
n portion of the authorization response comprising a digital signature; and 

12 a web server system for transferring authorization control code to the remote 

13 system, the authorization control code driving the remote system to perform the 

14 following steps: 

15 obtaining the digital signature of authenticated attributes, the 

16 authenticated attributes including the digest; and 

n generating the authorization response, the authorization response 

18 including the digitarsignature. 

19 

1 2. The payment management system of claim 1 : 

2 wherein the authorization control code further provides for the remote system to: 

3 generate additional message attributes; and 

4 combine the additional message attributes with the digest to generate the 

5 authenticated attributes; and 

6 the digital signature comprises a digital signature of a hash of the authenticated 

7 attributes. 
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8 

1 3. The payment management system of claim 2, wherein the authorization control 

2 code further drives the remote system to: 

3 generate and pass a dummy data string to a signing component to obtain a 

4 dummy authentication data structure, the dummy authentication data structure 

5 comprising a dummy digital signature; 

6 pass the authenticated attributes to the signing component to obtain the digital 

7 signature; 

8 combine the digital signature with at least a portion of the dummy authentication 

9 data structure by replacing the dummy digital signature with the digital signature to 

10 generate an authentication data structure; and 

11 include the authentication data structure in the authorization response. 

12 

1 4. The payment management system of claim 3, wherein: 

2 the dummy data structure further comprises a dummy digest; and 

3 the authorization control code further drives the remote system to combine the 

4 digest with the dummy authentication data structure to generate the authentication data 

5 structure by replacing the dummy digest with the digest. 
6 

1 5. The payment management system of claim 4, further comprising a log on 

2 module for authenticating the user of the remote system by: 

3 obtaining logon credentials identifying the user of the remote system; 

4 determining whether the logon credentials match those of an authorized user; 

5 and 

6 the electronic fund transfer submission module transfers the authorization 

7 request to the remote system only if the logon credentials match those of an authorized 

8 user. 

9 

i 6. The payment management system of claim 5, wherein the electronic fund 
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2 transfer submission module further authenticates the user of the remote system to the 

3 payments processor by: 

4 receiving an authentication challenge from the payments processor; 

5 transferring the authentication challenge to the remote system; 

6 receiving an authentication response from the remote system; and 

7 transferring the authentication response to the payments processor. 

8 

1 7. An payment management system for obtaining an approval of an electronic fund 

2 transfer disbursement file from a user of a remote system and transferring the 

3 electronic fund transfer disbursement file to a payments processor, the payment 

4 management system comprising: 

5 means for generating a digest by performing a hash on the electronic fund 

6 transfer disbursement file; 

7 means for transferring the digest to the remote system; 

8 means for receiving an authorization response from the remote system, the 

9 authorization response comprising a digital signature of authenticated attributes, the 

10 authenticated attributes comprising the digest; and 

n means for transferring an electronic funds submission to the payments processor 

12 over a secure connection, the electronic funds submission comprising the payment 

13 transaction file and at least a portion of the authorization response comprising the 

14 digital signature. 

15 

1 8. The payment management system of claim 7, wherein the remote system 

2 comprises means for: 

3 generating additional message attributes; and 

4 combining the additional message attributes with the digest to generate the 

5 authenticated attributes; and 

6 the digital signature comprises a digital signature of a hash of the authenticated 

7 attributes. 
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8 

1 9. The payment management system of claim 8, wherein the remote system further 

2 comprises means for: 

3 generating and passing a dummy data file to a signing component to obtain a 

4 dummy authentication data structure, the dummy authentication data structure 

5 comprising a dummy digital signature; 

6 passing the authenticated attributes to the signing component to obtain the 

7 digital signature; 

8 combining the digital signature with at least a portion of the dummy 

9 authentication data structure by replacing the dummy digital signature with the digital 

10 signature to generate an authentication data structure; and 

n including the authentication data structure in the authorization response. 

12 

1 10. The payment management system of claim 9, wherein: 

2 the dummy data structure further comprises a dummy digest; and 

3 the remote system further combines the digest with the dummy authentication 

4 data structure to generate the authentication data structure by replacing the dummy 

5 digest with the digest. 

6 

1 11. The payment management system of claim 1 0, further comprising means for 

2 authenticating the user of the remote system by: 



3 obtaining logon credentials identifying the user of the remote system; 

4 determining whether the logon credentials match those of an authorized user; 

5 and 

6 transferring the authorization request to the remote system occurs only if the 

7 logon credentials match those of an authorized user. 

8 

1 1 2. The payment management system of claim 1 1 , further comprising means for 

2 authenticating the user of the remote system to the payments processor by: 
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3 receiving an authentication challenge from the payments processor; 

4 transferring the authentication challenge to the remote system; 

5 receiving an authentication response from the remote system; and 

6 transferring the authentication response to the payments processor. 

7 



1 13. The payment management system of claim 7, further comprising a web server 

2 for passing authorization control code to the remote system, the authorization control 

3 code being at least one of executable by the remote system and interpretable by the 

4 remote system for driving the remote system to: 



5 generate additional message attributes; and 

6 combine the additional message attributes with the digest to generate the 

7 authenticated attributes; and 

8 the digital signature comprises a digital signature of a hash of the authenticated 

9 attributes. 

10 

1 14. The payment management system of claim 13, wherein the authorization control 

2 code further drives the remote system to: 

3 generate and pass a dummy data file to a signing component to obtain a dummy 

4 authentication data structure, the dummy authentication data structure comprising a 

5 dummy digital signature; 

6 pass the authenticated attributes to the signing component to obtain the digital 

7 signature; 

8 combine the digital signature with at least a portion of the dummy authentication 

9 data structure by replacing the dummy digital signature with the digital signature to 

10 generate an authentication data structure; and 

n include the authentication data structure in the authorization response. 

12 

1 15. The payment management system of claim 14; wherein 

2 the dummy data structure further comprises a dummy digest; and 
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3 the authorization control code further drives the remote system to combine the 

4 digest with the dummy authentication data structure to generate the authentication data 

5 structure by replacing the dummy digest with the digest. 

6 

1 1 6. The payment management system of claim 1 5, further comprising means for 

2 authenticating the user of the remote system by: 

3 obtaining logon credentials identifying the user of the remote system; 

4 determining whether the logon credentials match those of an authorized user; 

5 and 

6 transferring the authorization request to the remote system occurs only if the 

7 logon credentials match those of an authorized user. 

8 

1 17. The payment management system of claim 1 6, further comprising means for 

2 authenticating the user of the remote system to the payments processor by: 

3 receiving an authentication challenge from the payments processor; 

4 transferring the authentication challenge to the remote system; 

5 receiving an authentication response from the remote system; and 

6 transferring the authentication response to the payments processor. 

7 

8 

9 
10 
11 



